Legal

Acceptable Use Policy

Last updated: November 4, 2026

This Acceptable Use Policy ("Policy") sets out what you may not do when you use Locul, including our website, apps, browser extensions, API, connectors and any related service (together, the "Service"). The Service is operated by Ertiqah LLC ("we", "us", "our").

This Policy is part of our Terms. By using the Service, you agree to it. If you use the Service on behalf of a company or a client, you also agree on their behalf and you are responsible for how they use it.

01Security and system integrity

Unless we have given you written permission, you must not:

  • scan, probe or test the Service for vulnerabilities, including with automated vulnerability scanners;
  • fuzz any page, form, endpoint or API;
  • run load, stress or performance tests, or send traffic meant to slow down or overload the Service;
  • bypass, or try to bypass, sign-in, permissions, rate limits, usage limits, plan limits or any other security or access control;
  • access, or try to access, another user's account or data, or any data that is not yours;
  • interfere with, disrupt or damage the Service, its servers or the networks connected to it.

"Written permission" means an email from us that confirms the scope, the dates and where the testing will come from. Research that follows our Responsible Disclosure Policy is permitted within the limits of that policy (see section 8).

02Scraping and automated access

You must not scrape, crawl, harvest or mine data from the Service with bots, scripts or other automated means, except through the official API, integrations and connectors we provide, and only within their documented limits. You must not create accounts by automated means, or use the Service to collect other people's personal information without their consent.

03Spam and abuse

You must not use the Service to:

  • send spam, or unsolicited bulk or commercial messages;
  • harass, threaten, defraud or impersonate any person or organization;
  • run phishing or other scams;
  • create multiple accounts to get around limits, trials or a suspension.

04Malware and harmful code

You must not upload, send or link to viruses, malware, ransomware, spyware or any other code meant to damage, disable or gain unauthorized access to a system, device or data.

05Illegal and harmful content

You must not use the Service to create, store or share content that:

  • is illegal, or that encourages or helps illegal activity;
  • infringes anyone's copyright, trademark, privacy or other rights;
  • sexually exploits or endangers children;
  • threatens or promotes violence against any person or group.

06Reselling and sharing access

You must not sell, resell, rent, sublicense or share access to the Service or to your account, or offer the Service as part of your own product, unless we have agreed to it in writing. Serving your own clients through features we provide for that purpose, such as team or agency workspaces, is allowed.

07What happens if you break this Policy

If we believe you have broken this Policy, we may remove content and limit, suspend or terminate your access to the Service, with or without notice. We may report the activity to law enforcement, hosting providers or other affected parties, keep the related logs as evidence, and pursue any legal remedies available to us, including claims for damages and court orders.

Security testing that does not follow our Responsible Disclosure Policy is unauthorized access to our systems.

08Good-faith security research

We want to hear about security problems, and we would much rather fix them with you than read about them in public. If you find a vulnerability, report it to us privately and follow our Responsible Disclosure Policy. If you do:

  • we will treat your research as authorized under this Policy;
  • we will not take legal action against you or ask law enforcement to investigate you because of it;
  • we will not suspend or close your account because of it.

This safe harbor only applies to research that follows that policy, including reporting the issue to us first and keeping it private until it is fixed or 90 days have passed. If you are not sure whether something is allowed, ask us at [email protected] before you start.

09Reporting abuse

To report a breach of this Policy, email [email protected]. To report a security vulnerability, see our Responsible Disclosure Policy.

10Changes to this Policy

We may update this Policy from time to time. The date at the top shows when it last changed. If you keep using the Service after a change, you accept the updated Policy.